MY Cloud DL4100 Security Issue

Hello,

Our security firm just flagged our My Cloud for a security concern. The notice is below:

Upgrade to libupnp version 1.6.18 or later. If libupnp is
used as a third party library by a different application,
contact the vendor of that application for a fix.

I called support and they said this was not supported. Our firmware is up to date but they told me that would not help with this. Anyone else run into this issue?

Have you checked this out in the DL forum?

https://community.wd.com/c/network-attached-storage/my-cloud-business-series

No, I didn’t know about that that one. I’ll repost there.

Thanks!

There are many security vulnerabilities that have been identified in the various Linux packages that are used to build the MyCloud’s firmware. WD have never acknowledged these vulnerabilities, or made any attempt to identify which CVE reports any firmware upgrades are supposed to have fixed.

Quite frankly, their approach to security is disgraceful and unprofessional.